$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af62e99b-bf61-3552-84d9-2acc96e6f689.roa File: af62e99b-bf61-3552-84d9-2acc96e6f689.roa (raw, json) Hash identifier: CmqxzfVIWKZ3iRq0v7j6MQCAyUrQ+RJHUVDCTppihlI= Subject key identifier: B7:A2:8C:40:80:8A:E2:61:07:5F:F6:47:09:27:3B:DF:D8:93:E3:F6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F49794248B250C9F1D1922980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af62e99b-bf61-3552-84d9-2acc96e6f689.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13367 IP address blocks: 24.7.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:79:42:48:b2:50:c9:f1:d1:92:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bfb4d618-d9d4-4a82-a39e-2d828d3b7c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:64:ad:33:38:66:d6:f7:44:e7:07:35:91:7b: 48:58:9c:20:d5:28:bf:07:7d:7f:9f:af:0e:10:5c: f7:aa:88:64:57:61:c9:ef:84:a9:db:6b:af:f3:ba: b7:25:3c:92:1d:87:15:8a:c8:5c:e4:ff:c3:b0:11: 19:ce:49:41:2d:92:28:65:d7:35:e4:de:11:83:97: ba:05:eb:29:af:82:3b:fa:45:99:a6:e6:61:88:47: ae:60:b7:dc:33:19:0f:8c:94:c7:5e:05:52:7e:78: c6:0a:05:db:f7:19:cd:1d:eb:d5:bd:79:42:0f:4d: 50:47:0f:ef:a5:bd:24:8a:6b:9c:c7:61:b1:42:dd: 89:e2:9d:73:4e:16:99:fb:07:50:7b:8b:60:a1:d0: 93:0c:3a:a3:87:cc:87:a6:44:bd:5b:e7:f9:17:2b: 3d:64:64:54:4b:fe:a2:f2:6b:45:fc:8a:52:3d:76: 0a:bc:3e:b6:d7:39:ee:4f:ea:d2:be:d1:41:ed:ad: 7e:f4:13:3e:ed:56:b3:03:c2:fb:9d:2c:38:8a:f7: 9f:bc:d1:36:72:91:3c:8c:61:9a:89:f1:5e:28:ef: 6b:a0:85:54:1a:23:7a:47:44:52:f1:c8:35:f1:cc: c5:d2:35:3c:7f:d1:e5:8a:17:22:8e:4e:37:53:df: cd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A2:8C:40:80:8A:E2:61:07:5F:F6:47:09:27:3B:DF:D8:93:E3:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af62e99b-bf61-3552-84d9-2acc96e6f689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.7.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:2a:f6:ed:6a:9f:74:60:c1:6e:a8:b3:86:4c:09:f2:d6:49: 23:0b:bd:b1:11:39:1c:9c:d0:59:b9:f5:71:ab:58:b2:3a:51: 61:4e:e3:f6:fd:16:eb:a4:8d:b5:89:0a:60:25:5d:b6:99:d5: 6b:83:64:74:ab:43:da:e9:d4:9f:d0:e3:0f:65:a7:e4:50:3c: 59:c4:ce:2c:7c:29:c3:23:cf:26:ec:ed:ae:85:69:6c:e4:30: b6:91:c8:cc:4a:3a:44:d0:5f:7b:cc:8b:70:7b:83:d5:bc:de: 6e:77:3a:0e:3a:6b:1e:b6:be:f2:4d:22:c1:61:22:88:1a:92: 89:8e:28:5a:82:8b:eb:84:d7:73:2f:60:1a:a3:f6:a2:aa:08: 0f:b4:b6:2c:3e:b7:d9:c7:a3:dc:ed:ad:be:63:ab:87:b0:fa: aa:25:a4:0e:8a:46:8b:31:b4:12:c9:87:3a:cf:53:09:bc:83: b5:90:2a:f5:fb:1e:ba:ca:4b:13:0f:1a:43:6a:47:52:a9:ab: e8:8c:01:32:02:6e:53:b0:91:f9:90:b7:c5:bf:ce:66:6d:3b: ef:f0:97:18:b0:23:83:5e:2e:31:c2:67:f3:96:f0:6e:b8:0c: b8:95:c3:dd:fc:38:03:ee:f3:fc:64:f2:e3:08:06:7b:de:c2: eb:91:4d:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeUJIslDJ8dGSKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmZiNGQ2MTgtZDlkNC00YTgyLWEzOWUtMmQ4MjhkM2I3YzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2StMzhm1vdE5wc1kXtIWJwg1Si/B31/n68O EFz3qohkV2HJ74Sp22uv87q3JTySHYcVishc5P/DsBEZzklBLZIoZdc15N4Rg5e6 Bespr4I7+kWZpuZhiEeuYLfcMxkPjJTHXgVSfnjGCgXb9xnNHevVvXlCD01QRw/v pb0kimucx2GxQt2J4p1zThaZ+wdQe4tgodCTDDqjh8yHpkS9W+f5Fys9ZGRUS/6i 8mtF/IpSPXYKvD621znuT+rSvtFB7a1+9BM+7VazA8L7nSw4ivefvNE2cpE8jGGa ifFeKO9roIVUGiN6R0RS8cg18czF0jU8f9Hlihcijk43U9/NvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeijECAiuJhB1/2RwknO9/Yk+P2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWY2MmU5OWItYmY2MS0z NTUyLTg0ZDktMmFjYzk2ZTZmNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAfsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANwq9u1qn3RgwW6os4ZMCfLWSSMLvbERORyc0Fm59XGrWLI6UWFO4/b9 FuukjbWJCmAlXbaZ1WuDZHSrQ9rp1J/Q4w9lp+RQPFnEzix8KcMjzybs7a6FaWzk MLaRyMxKOkTQX3vMi3B7g9W83m53Og46ax62vvJNIsFhIogakomOKFqCi+uE13Mv YBqj9qKqCA+0tiw+t9nHo9ztrb5jq4ew+qolpA6KRosxtBLJhzrPUwm8g7WQKvX7 HrrKSxMPGkNqR1Kpq+iMATICblOwkfmQt8W/zmZtO+/wlxiwI4NeLjHCZ/OW8G64 DLiVw938OAPu8/xk8uMIBnvewuuRTVs= -----END CERTIFICATE-----Generated at Fri Sep 25 17:59:20 2026 by rpki-client